I removed the virus as per instructions here at bleepingcomputer.com I ran the Rkill and Malwarebytes in safe mode. I restarted the computer a few times. No problem. The next day the customer calls and everything I did was un-done. The computer was restored back to the time before I removed the virus. Both customers had the same issue.
I guess turning off system restore is the only answer before trying the removal process, provided that you can get to the system restore program.
Anyone else see this?
Edited by Orange Blossom, 24 September 2010 - 12:53 PM.
Moved to AV forum from breaking news. ~ OB